Login Request a demo
BI
Product
BIOS
by Lenovo · last CVE Apr 5, 2024
11
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 0High 2Medium 9Low 0
Severity
All severities11Critical0High2Medium9Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add BIOS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-3431
7.8
0%
Oct 9
A potential vulnerability in a driver used during manufacturing process on some consumer Lenovo Notebook devices that was mistakenly not deactivated may allow an attacker with…
Affected: various
CVE-2016-5247
7.8
0%
Sep 22
The BIOS for Lenovo ThinkCentre E93, M6500t/s, M6600, M6600q, M6600t/s, M73p, M800, M83, M8500t/s, M8600t/s, M900, M93, and M93P devices; ThinkServer RQ940, RS140, TS140, TS240,…
Affected: All versions, or not specified
CVE-2023-25493
6.7
0%
Apr 5
A potential vulnerability was reported in the BIOS update tool driver for some Desktop, Smart Edge, Smart Office, and ThinkStation products that could allow a local user with…
Affected: various
CVE-2023-45079
6.7
0%
Nov 8
A memory leakage vulnerability was reported in the NvmramSmm SMM driver that may allow a local attacker with elevated privileges to write to NVRAM variables
Affected: various
CVE-2023-45078
6.7
0%
Nov 8
A memory leakage vulnerability was reported in the DustFilterAlertSmm SMM driver that may allow a local attacker with elevated privileges to write to NVRAM variables
Affected: various
CVE-2023-45077
6.7
0%
Nov 8
A memory leakage vulnerability was reported in the 534D0740 DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables
Affected: various
CVE-2023-45076
6.7
0%
Nov 8
A memory leakage vulnerability was reported in the 534D0140 DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables
Affected: various
CVE-2023-45075
6.7
0%
Nov 8
A memory leakage vulnerability was reported in the SWSMI_Shadow DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables
Affected: various
CVE-2021-3452
6.7
0%
Jul 16
A potential vulnerability in the system shutdown SMI callback function in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary…
Affected: All versions, or not specified
CVE-2017-3754
6.7
0%
Jul 17
Some Lenovo brand notebook systems do not have write protections properly configured in the system BIOS
Affected: All versions, or not specified
CVE-2016-8224
4.4
0%
Nov 29
A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileges on a system could install a program that…
Affected: All versions, or not specified
Showing 11